Virtual Shop
Security
 
Security systems  

All the security systems provided by this web site for secure payment transactions are aligned with the best security standards available today in the web to grant the best security and privacy in credit card payment transactions. The communications between the customer's computer and the payment system of Consorzio Triveneto happen usign HTTPS and 128bit SSL3 protocols. Find out more below.

 
SSL (Secure Socket Layer)

SSL is an open and not proprietary protocol of secure communications that has been proposed from Corporation Netscape Communications to the World Wide Consortium (W3C) as a standard for the Internet world. Through SSL it is possible to make encrypted transactions inside of high level protocols as HTTP, NNTP and FTP; for example it is possible to visualize a WWW page doing that all what defines the page comes transferred in encrypted way and therefore is inaccessible to third parts. The SSL protocol concurs with the user’s computer to verify the authenticity of the server (every server that uses SSL must have installed at least a digital certificate that identifies it), allows to encrypt the data transferred from the user’s computer to the server or vice versa, and, if requested from the server, concurs to verify the authenticity of the client-side certificates (user’s computer authentication). SSL currently is implemented from the greater part of Internet browsers like Microsoft Internet Explorer, Netscape Navigator, Opera, and from the more important server platforms.

 
HTTPS (Secure Hypertext Transfer Protocol)

HTTPS is a WWW protocol developed from Netscape in order to encrypt and decrypt the only WWW pages that are sent from the server to the Internet user’s computer. Substantially HTTPS is the application of the SSL protocol on the HTTP protocol. Normally HTTPS uses port 443 instead that the HTTP standard port 80. SSL uses a 40, 56 or 128 bit key in order to implement a RC4 cryptographic algorithm which is considered adequately sure for the trade transactions. HTTPS does not have to be confused with SHTTP, an improved version of HTTP developed as standard from the EIT in order to support secure transactions.